67437c6da5a9896649e34afb67405fcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67437c6da5a9896649e34afb67405fcd
Size

18KB
MD5

67437c6da5a9896649e34afb67405fcd
SHA1

c7bed1db01d8a9c89ace446f1f2e7eb77d686d03
SHA256

e3506e1837713ecaae8bc70713809827b1fc57eaa373eacfd0525d30d1bcdcb8
SHA512

fe886992a8a520b4c53f42eb725b6416ec07ee9c2c23b4c9f7539c445eb01e0d0bca869938660ae5660821b57d7e9a4f7e3e658e5292be57c14d2dcc4d80a851
SSDEEP

384:hK2qdHafpX1xxDdyMOMKbV7nLUsSJRfMis2VZ:hK2qd6fplXDEM8nLqf1Dj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/gskeycheck.exe

Files

67437c6da5a9896649e34afb67405fcd
.zip
gskeycheck.c
gskeycheck.exe
.exe windows:4 windows x86 arch:x86

c8e4a6fe19e9717e30ca3b26182e43ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetTickCount
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
atexit
calloc
exit
fclose
fflush
fgetc
fgets
fopen
fprintf
fwrite
memcpy
memmove
printf
putchar
puts
setbuf
signal
sprintf
sscanf
strerror
strlen
strncpy
strstr
tolower

ws2_32

WSAGetLastError
WSAStartup
closesocket
gethostbyname
htons
inet_addr
inet_ntoa
recvfrom
select
sendto
socket

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gskeycheck.txt
md5.c
md5.h
winerr.h